sora/nixconfig
1
0
Fork 1
Code Issues 2 Pull Requests Actions Releases Activity

traefik docker

Browse Source
This commit is contained in:
soraefir
2026-05-08 23:57:19 +02:00
parent bb5ecbba73
commit e1651cba2a
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
modules/server/containers/defs/traefik.nix
View File

@@ -28,6 +28,7 @@ in {
"traefik.http.middlewares.authentik.forwardauth.trustForwardHeader" = "true"; "traefik.http.middlewares.authentik.forwardauth.trustForwardHeader" = "true";
"traefik.http.middlewares.authentik.forwardauth.authResponseHeaders" = "X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid,X-authentik-jwt,X-authentik-meta-jwks,X-authentik-meta-outpost,X-authentik-meta-provider,X-authentik-meta-app,X-authentik-meta-version"; "traefik.http.middlewares.authentik.forwardauth.authResponseHeaders" = "X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid,X-authentik-jwt,X-authentik-meta-jwks,X-authentik-meta-outpost,X-authentik-meta-provider,X-authentik-meta-app,X-authentik-meta-version";
}; };
extraOptions = [ "--user=:994" ]; #PODMAN GROUP FOR SOCKET ACCESS
overrides = { overrides = {
cmd = [ cmd = [
"--api" "--api"
@@ -54,8 +55,10 @@ in {
"--entrypoints.web-secure.http.tls.domains[0].sans=${serverCfg.hostDomain}" "--entrypoints.web-secure.http.tls.domains[0].sans=${serverCfg.hostDomain}"
]; ];
ports = [ "443:443" "80:80" ]; ports = [ "443:443" "80:80" ];
volumes = [ overrides = {
"/var/run/docker.sock:/var/run/docker.sock:ro" cmd = [ "worker" ];
volumes = [
"/var/run/podman/podman.sock:/var/run/docker.sock" #PODMAN GROUP FOR SOCKET ACCESS
# "${serverCfg.configPath}/traefik/traefik.yaml:/etc/traefik/traefik.yaml" # "${serverCfg.configPath}/traefik/traefik.yaml:/etc/traefik/traefik.yaml"
# "${serverCfg.configPath}/traefik/access.log:/etc/traefik/access.log" # "${serverCfg.configPath}/traefik/access.log:/etc/traefik/access.log"
# "${serverCfg.configPath}/traefik/acme.json:/acme.json" # "${serverCfg.configPath}/traefik/acme.json:/acme.json"